Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
File: JU0Xi-GyC41zhEa-BS4InImgCrM.cer (raw, json)
Hash identifier: 8ztm3sFgq9RdBtWV13DGrNX1Tu6swmUPwDDc7LdagMg=
Subject key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247BD3E3438DA194FD2275B716C483
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 16097
IP: 80.64.176.0/20
IP: 85.232.0.0/19
IP: 85.239.96.0/19
IP: 94.101.32.0/20
IP: 109.104.32.0/19
IP: 146.0.96.0/19
IP: 185.19.52.0/22
IP: 185.80.120.0/22
IP: 212.122.32.0/19
IP: 213.187.64.0/19
IP: 217.69.224.0/19
IP: 2a02:238::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7b:d3:e3:43:8d:a1:94:fd:22:75:b7:16:c4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=254d178be1b20b8d738446be052e089c89a00ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:42:0b:9e:6f:79:36:ae:a1:7c:c7:59:60:
88:01:d7:a8:94:a9:1f:ab:f7:20:11:2a:ff:99:81:
7a:19:1d:c0:84:7c:8f:8c:ef:65:20:30:cf:cb:16:
97:28:6c:52:d1:29:44:14:75:da:0e:f0:95:89:29:
7d:dc:d5:5e:55:17:e1:d3:8f:03:d5:75:fb:8c:5d:
e3:c4:0e:86:fb:f6:76:13:5b:e7:f0:ad:de:78:25:
4a:2b:35:ac:7f:c0:d3:66:60:65:bb:41:d1:13:dc:
3e:35:b9:44:e7:cb:44:a1:36:3e:3f:e4:fa:4a:0f:
a9:72:1b:58:ca:d8:84:14:4c:e8:29:05:8f:6f:82:
93:07:aa:9f:53:58:bc:76:ec:4d:a0:7b:47:61:37:
97:14:54:89:25:a3:ad:cd:78:3b:7b:c1:18:4f:59:
e4:b9:a8:b3:93:fe:f1:cc:c0:56:c2:fc:4b:3b:52:
d0:30:46:55:fa:44:3a:ab:87:d3:09:55:6d:ab:f9:
10:72:62:df:be:56:e8:25:14:f6:43:52:81:99:34:
1d:6f:e0:cd:7b:5d:5a:96:3c:04:5f:62:65:33:00:
83:7b:6a:af:7f:39:29:0a:e4:34:46:07:fe:0c:fc:
66:d1:db:f1:f8:ed:ab:d6:68:c6:25:68:3d:1a:21:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.64.176.0/20
85.232.0.0/19
85.239.96.0/19
94.101.32.0/20
109.104.32.0/19
146.0.96.0/19
185.19.52.0/22
185.80.120.0/22
212.122.32.0/19
213.187.64.0/19
217.69.224.0/19
IPv6:
2a02:238::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16097
Signature Algorithm: sha256WithRSAEncryption
7a:00:94:fe:3e:84:73:46:3f:bb:6f:1e:21:39:aa:15:79:c6:
a3:83:5c:b4:e6:4a:42:ab:48:ec:59:b2:ec:a9:03:cb:2a:75:
f9:05:1a:55:ec:bf:df:84:7c:f2:3b:d5:37:8f:2a:83:29:69:
eb:56:7b:c2:7f:d1:35:0f:70:ee:a6:e9:a8:9f:b5:77:20:3f:
b6:4a:67:fd:d1:07:9a:f4:38:c4:f6:6a:a2:48:e4:a0:31:76:
3f:43:93:4a:0a:1c:cf:08:00:f8:c0:bb:73:98:95:af:56:1f:
88:ca:65:68:22:b8:56:29:3e:e7:73:52:43:a4:67:6c:6e:c0:
59:6f:a2:0d:23:5d:82:21:05:e0:dc:f2:05:34:d7:90:c8:d2:
ca:92:14:b5:e7:1d:5d:a6:55:fe:29:a8:c1:cb:f5:b7:ae:70:
05:92:9e:32:1c:ca:25:28:54:21:14:ad:87:3b:51:b4:25:b3:
cf:59:85:07:a7:58:a8:91:7f:ea:de:b1:20:9c:56:9e:7e:cf:
33:45:98:5c:ba:ef:2e:f0:ea:f5:a5:b4:31:ec:97:28:64:9b:
2a:2b:96:de:1b:5a:e1:0c:0a:8d:0a:cd:94:57:c9:7f:3e:6f:
18:71:69:4b:a7:c1:4e:5c:ae:94:c4:a2:07:6e:2e:96:19:64:
8e:0a:9e:84
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAYzEJHvT40ONoZT9InW3FsSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTRkMTc4YmUxYjIwYjhkNzM4NDQ2YmUwNTJlMDg5Yzg5YTAwYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKhCC55veTauoXzHWWCIAdeolKkf
q/cgESr/mYF6GR3AhHyPjO9lIDDPyxaXKGxS0SlEFHXaDvCViSl93NVeVRfh048D
1XX7jF3jxA6G+/Z2E1vn8K3eeCVKKzWsf8DTZmBlu0HRE9w+NblE58tEoTY+P+T6
Sg+pchtYytiEFEzoKQWPb4KTB6qfU1i8duxNoHtHYTeXFFSJJaOtzXg7e8EYT1nk
uaizk/7xzMBWwvxLO1LQMEZV+kQ6q4fTCVVtq/kQcmLfvlboJRT2Q1KBmTQdb+DN
e11aljwEX2JlMwCDe2qvfzkpCuQ0Rgf+DPxm0dvx+O2r1mjGJWg9GiE3zQIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFCVNF4vhsguNc4RGvgUuCJyJoAqzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkLzY4YWNl
Ny0zZTMxLTRjZmUtYTFlNC1hMTA0ZDI0NzcxNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvNjhhY2U3
LTNlMzEtNGNmZS1hMWU0LWExMDRkMjQ3NzE1Zi8xL0pVMFhpLUd5QzQxemhFYS1C
UzRJbkltZ0NyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF
BwEHAQH/BFswWTBIBAIAATBCAwQEUECwAwQFVegAAwQFVe9gAwQEXmUgAwQFbWgg
AwQFkgBgAwQCuRM0AwQCuVB4AwQF1HogAwQF1btAAwQF2UXgMA0EAgACMAcDBQAq
AgI4MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj7hMA0GCSqGSIb3DQEBCwUAA4IB
AQB6AJT+PoRzRj+7bx4hOaoVecajg1y05kpCq0jsWbLsqQPLKnX5BRpV7L/fhHzy
O9U3jyqDKWnrVnvCf9E1D3Dupumon7V3ID+2Smf90Qea9DjE9mqiSOSgMXY/Q5NK
ChzPCAD4wLtzmJWvVh+IymVoIrhWKT7nc1JDpGdsbsBZb6INI12CIQXg3PIFNNeQ
yNLKkhS15x1dplX+KajBy/W3rnAFkp4yHMolKFQhFK2HO1G0JbPPWYUHp1iokX/q
3rEgnFaefs8zRZhcuu8u8Or1pbQx7JcoZJsqK5beG1rhDAqNCs2UV8l/Pm8YcWlL
p8FOXK6UxKIHbi6WGWSOCp6E
-----END CERTIFICATE-----
Generated at Fri May 3 01:40:13 2024 by rpki-client on console-ams.rpki-client.org